Lambda Durable Functions
Lambda functions with a DurableConfig can run as checkpointed, replayable durable executions.
- Supports waits, step retries, callbacks, chained invokes, execution history, stop and drain behavior, retention, and the durable management APIs.
- Validated across Python, Node.js, Java, and .NET runtimes.
- Functions must package the AWS Durable Execution SDK. KMS encryption, monitoring events, and account-level quotas are not yet emulated.
- Running durable executions requires a paid LocalStack plan.
CloudFront Functions and KeyValueStore
Viewer-request CloudFront Functions can now use CloudFront KeyValueStore data when routing requests.
- Adds KeyValueStore control-plane and data-plane operations with ETag handling.
- Functions can use
cf.kvs() to read values, rewrite request URIs, return responses, and write console logs. TestFunction is now supported.
Native ELBv2 Provider
The native ELBv2 provider is now the default, with automatic migration of existing persisted state.
- Expands target health, listener, load balancer, target group, certificate, attribute, and validation coverage.
- Adds
ModifyCapacityReservation and Resource Groups Tagging API coverage.
Verified Permissions Coverage
- Adds OIDC identity sources, policy-store aliases, named policies and templates, KMS encryption settings, and Cedar 4 data types.
- List operations support pagination, and policy stores report
CEDAR_4. - CloudFormation can update policies and policy templates in place.
RDS and OpenSearch
- RDS adds Aurora Limitless DB shard group APIs, Data API endpoint controls, orderable instance options, parameter group operations, and engine-version default fixes.
- OpenSearch 3.7 is supported and is the default for new domains.
- OpenSearch adds
UpgradeDomain, stable domain configuration responses, and CloudFormation domain updates.
CloudFormation Resource Updates
The CloudFormation engine can update a broader set of resources in place across API Gateway, Cognito, AppSync, Glue, Events, networking, databases, and operations services.
Runtime and Provider Fixes
- The Docker image uses Debian trixie again to avoid package-transition failures in database services.
- Container-spawning services accept service-specific
_DOCKER_FLAGS settings. - A thread-retention leak affecting long-running Lambda, ECS, and Step Functions workloads is fixed.